Technical Security Analyst

As a Technical Security Analyst here at Chubb, you'll leverage your broad information security expertise to play a crucial role in our Regional Information Security Office (RISO) for North America. Reporting to the Head of Technical Security. You'll collaborate with business, technical, and engineering stakeholders to identify and address security gaps, guide compliance corrections, and manage control exceptions throughout the development and infrastructure deployment lifecycle. You'll drive business process improvements using tools like Power Automate, contributing to strategic project deployments. You'll engage with stakeholders at all levels, playing a critical role in ensuring the security and stability of our applications and infrastructure. At Chubb, you won’t be silo’d; you’ll have broad exposure across all areas of information security, in a complex technical environment that powers Chubb’s North American business operations. To do so, you’ll leverageyour knowledge of, and gain additional exposure to,: • Application Security:Leverage your understanding of application security, including mastery of security principles, familiarity with the OWASP Top 10, and the ability to secure CI/CD pipelines • Vulnerability Management:You’ll regularly interpret SAST/DAST/SCA/IAST/Infra vulnerability management tool results and provide advice to development, infrastructure, and business stakeholders • Network Security:Employ your knowledge of network security principles and best practices, analyze network connectivity for security, and understand the importance of DMZs and firewall technologies • Identity and Access Management:Use your knowledge of authentication methods and Privileged Access Management to ensure adherence to authentication standards • Data Security:Incorporate your knowledge of data classification and encryption to apply best practices to database technologies • Reporting and Automation:Utilize tools like Power Automate to automate business processes while gathering and presenting security metrics to business and technical stakeholders through the use of BI tools such as Qlik, PowerBI, Tableau, etc.